Security Research Engineer

RunSybil

73d•Remote

About The Position

About RunSybil Founded in 2023 by Ari Herbert-Voss and Vlad Ionescu, RunSybil is on a mission to automate hacker intuition. We’re building Sybil: an AI-driven pentester that discovers vulnerabilities before they’re exploited. As adversaries adopt AI to increase their attack surface, we’re putting cutting-edge offensive security into the hands of defenders. Backed by strong investor support and early customer traction, our team is composed of experts from OpenAI, Meta, Mandiant, Palantir, Cruise, Trail of Bits, and Aptiv. About the Role We are looking for a Security Research Engineer who ships. You will own the research and development of offensive capabilities that power Sybil, working end-to-end from vulnerability discovery through production delivery. This is a role for someone who finds their own problems, builds their own solutions, and raises the bar for everyone around them. You will work closely with our engineering and product teams to translate offensive security intuition into repeatable, AI-driven capabilities. If you thrive in ambiguity, move fast, and want your work to have a direct impact on a product customers rely on, this is the role for you.

Requirements

4 or more years of software engineering experience, with meaningful time in offensive security contexts
Hands-on experience finding vulnerabilities across a variety of targets, whether through red teaming, bug bounty, CTF, or production pentesting
Strong Python fundamentals: you have designed, deployed, and maintained backend systems in production
Comfort with modern JavaScript and React; you can own a feature across the full stack
Experience building with LLMs or generative AI tools, including prompt engineering and integrating model outputs into real workflows
A builder's instinct: you default to figuring things out, not waiting for direction
Familiarity with DevOps and infrastructure concepts; you can own your own deployment pipeline
Strong written communication; you can explain a vulnerability, a design decision, or a tradeoff clearly

Responsibilities

Research and develop offensive agentic capabilities that become core Sybil features
Hunt for real vulnerabilities across a range of target environments and translate what you find into repeatable, automated techniques
Build and ship end-to-end customer-facing features: from research spike to production deployment
Design and implement LLM-powered tooling that extends Sybil's reach and depth across attack surfaces
Identify gaps in our offensive coverage and propose technical initiatives to close them, without waiting to be asked
Contribute to technical design discussions, review your teammates' work, and hold a high bar for what we ship
Operate with ownership: you define the problem, build the solution, and see it through